ln-41-surgical-change-implementer
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a well-defined process for software development tasks. It prioritizes using existing repository tools and platform capabilities over custom or external solutions. No malicious commands or suspicious behaviors were identified.- [INDIRECT_PROMPT_INJECTION]: The skill describes a workflow that ingests external data sources like user requests and repository instructions, which could potentially contain adversarial instructions. However, the risk is mitigated by a required verification phase.
- Ingestion points: SKILL.md (User requests, linked tasks or plans, and repository instructions).
- Boundary markers: The skill does not explicitly define delimiters to isolate external data from instructions.
- Capability inventory: File system modification, repository-defined build/test command execution, and package manager usage.
- Sanitization: The skill does not describe explicit sanitization of ingested content.
Audit Metadata